CVE-2026-0883
Information disclosure in the Networking component
Medium · published January 13, 2026
What it is
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00355 · 28.0th percentile
- Published
- 2026-01-13T13:30Z
EPSS history
Timeline